DevSecOPS consultant (DevOps Security)

Role Expectations / Required Skills

This role requires strong handson expertise across the DevSecOps application lifecycle, including:

1. EndtoEnd Application DevSecOps
   • Managing the complete DevSecOps pipeline from development to deployment
   • Integrating security practices across CI/CD
   • Ensuring automation, traceability, and compliance throughout the lifecycle
2. Application Code Management
   • Expertise in version control systems (e.g., Git, Azure Repos, GitHub)
   • Branching strategies, merge processes, and release management
3. Build, Deployment, and Scan Pipeline Setup & Support
   • Designing and maintaining CI/CD pipelines using tools like Azure DevOps, Jenkins, GitHub Actions, etc.
   • Implementing automated build, deployment, and security scan stages
   • Troubleshooting pipeline failures and ensuring high reliability
4. Code Quality, Review, and Governance Adherence
   • Performing code reviews to ensure coding standards and design best practices
   • Integrating tools like SonarQube, Checkmarx, or Fortify
   • Enforcing organizational governance and compliance policies
5. Security and Vulnerability Management
   • Running SAST, SCA, DAST, and container security scans
   • Prioritizing and remediating vulnerabilities with dev teams
   • Ensuring alignment with security frameworks and regulatory requirements